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CLAIMS 

I claim: 

1. A secure on-line printing method, comprising the steps of: 

establishing a communication link between a first 
computer and a second computer; 

executing a print software on said first computer; 
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said print software initiating a continuous 
communication link between said first computer and said 
second computer using a dynamic password; 



15 



verifying said dynamic password for terminating said 
printing software when said communication link is not 
'continuous; 



20 



said print software sending a request for a print 
authorization to said second computer; 

said second computer sending a permission and 
information to said first computer in response to said 
request, while /said communication link is continuous. 
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The method of claim 1 wheifein 
information are used for 
communication link is continuous 



in said permission and 
printing an image while said 
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3. The method of claim 2 where ;in said step of said print software 
sending a request includes encrypting said request. 

4. The method of claim 3 wher ein said step of said second 
computer sending a permission and information includes 
encrypting said permission! 




The method of claim 4 wherein said step of said second 
computer sending a pen/i^^n and information includes 
encrypting said information. 

The method of claim 5 whejein said information comprise an 
image of a postal indicia. 
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7. The method of claim 6 wherein said request for said print 
authorization includes/ a postage amount. 



8. The method of claim 7 wherein said dynamic password 

generation is based upon dej^ry^ destination information and 
said postage amount 
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11. 




The method of claim 8 whereii^said dynamic password 

The method of claim 9 wherein said step of said printing 
software sending a request for ^print authorization is in 
response to a command from a user. 



i a use 



The method of claim 10 wh^ein^^d dynamic password 
generation is further basea upon a user information. 



The method of claim 11 wherein said second computer 
comprises a database containing user information. 



13. The method of claim 12 wherein/said user information 
comprises financial information Jof a user. 



14. The method of claim 13 whereir 
sending a permission to said fir 
request further comprises the st 



said step of second computer 
: computer in response to said 
ps of: 



said second computer accessing said user information to 
verify a fund availabiliw to cover said postage amount. 
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15. The method of claim 1 whereftn tffe step of said print software 
initiating a continuous communication link comprises: 



04500.913 



107 



Express Mail #EL111266894US 



9 



initiating an asynchronous header for ensuring said 
communication link between said first computer and said 
second computer is cominuous. 

16. The method of claim 15 wherein the step of initiating said 
dynamic password compri 
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using said asynchronous header for terminating said 
printing softwad 



17. 




The method of clainy 16 wherein said second computer has a 
controller code on said print software, said controller code 
providing inputs to/ said asynchronous header code. 

The method of claim 17 wherein saicystep of printing an indicia 
comprises the step of: 
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disabling a print spooler of said printer. 

19. The method of claim 18 furtner comprising the step of said print 
software sending a print cancel command to said printer when 
said communication link/disconnects. 
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20. The method of claim 5 wherein said information comprise 
image of a ticket. 

21. The method of claim 20 wherein said request for said print 
authorization includes a ticKet price. 

22. The method of claim 21 whbreiinsaid dynamic password is 



generated based upon said /ticket price. 



./tic 



IQ I 23. The method of claim 22 wherein said step of second computer 

sending a permission to said first coirtputer in response to said 
request further comprises the steps or: 

said second computer accessing a user's financial 
! 5 information to verify funds /availability to cover said 

ticket price. 

24. The method of claim 5 whereiiy said information comprise 
image of a check. 
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25. The method of claim 24 whetfein said request for said print 
authorization includes a check amount. 



26. The method of claim 25 wherein said dynamic password is 
25 generated based upon said check amount. 



04500.913 



109 



Express Mail #EL111266894US 



The method of claim 26 wherein 



said step of second computer 



sending a permission to said firs t computer in response to said 
request further comprises the st<ips of: 



said second computer ao 



essing a user's financial 



information to verify furjds availability to cover said 
check amount; 

sending a permission to/said first computer. 



The method of claim 5 wherein said information comprises 
image of a coupon. 



The method of claim 28 
authorization includes a 



coupon 



wherein said request for said print 
amount. 



The method of claim 29 wh^rrin said dynamic password is 

>aui LefGgon amount. 



generation based upon s 



The method of claim 1 wherein s/id information comprises 
image of a certificate. 

A secure on-line postage metering method comprising the steps 
of: 
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a user computer establishing) a communication link with 
a vendor computer; 

providing a printer connected to said user computer; 

executing an on-line postag<| metering software on said 
user computer; 
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said on-line postage metering software initiating an 
asynchronous header for ensuring said communication 
link between said first computer and said second 
computer is continuous using a dynamic password; 



verifying said dynamic password using said asynchronous 
header for terminating said on-line postage metering 



software when said communication link is not 
continuous; 

said on-line postage metering software sending a request 



for a print authorization 
vendor computer; 



for a postage amount to said 



said vendor computer accessing a database to verify a fund 
availability to cover said postage amount; 
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said vendor computer 
information to said first 
request- 



si jnding a permission and image 
computer in response to said 



said on-line postage metering software sending said image 
information to said printer while said communication 
link is continuous. 



33. The method of claim 32 wherein said step of said on-line postage 
metering software sending a request includes encrypting said 
request. 



34. 



35. 




The method of claim 33 wh 
computer sending a permission 
encrypting said permission 



rein said step of said vendor 

and image information includes 



The method of claim 34 wherein said step of said vendor 
computer sending a permis^^^^image information includes 
encrypting said image information. 

The method of claim 35 furmer including the step of: 

said on-line postage metering software disabling a print 
spooler of said printer. 
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37. The method of claim 36 wherein said dynamic password 

generation is based upon delrwery destination information and 
said postage amount. 




38. The method of claim 37 wherein said dynamic password 

generation is further based upon a time on said user computer. 




The method of claim 38 wherein said step of said on-line postage 
metering software sending i request for a print authorization is 
10 in response to a command f rom a user. 

40. The method of claim 39 wl^rein said dynamic password 
generation is further based upon a user information. 

^ jf 41. The method of claim 40 further dkmprising the step of said on- 
line postage metering software sending a print cancel command 
to said printer when said communication link is interrupted. 

42. A secure on-line postage management method comprising the 
20 steps of: 



establishing continuous and secure communication 
between a client system and a server system; 
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said client system processing ^ user request for generating 
an indicia; 

said client system securely communicating said user 
request to said server system] 

said server system processing said user request; 
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said server system securely/ communicating to said client 



system a response to said user request ; 



said client system processing said response to generate an 
indicia; 



15 



20 



said client system generating an indicia while 



communication between Isaid server system and said 
client system remains secure and continuous. 



43. The method of claim 42 wherepi 

server system securely communicating 
comprises the steps of: 



said step of client system and 
with one another 



registering a user by establishing a secured 
communication link between said client system and said 
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server system and verif f ing the authenticity of 
information exchanged; 

continuously monitorir g said established communication 
link by verifying the authenticity of the information 
exchanged. 

44. The method of claim 43 wherein said step of registering a user 
comprises the steps of: 

said client system selecting a password; 



securely sending saic 



password to said server system; 



said client system iss ling a challenge to said server 
system; 

said server system n odifying said challenge 
cryptographically; 

said client system v ^rifying said modified challenge for 
proper authentication of the communication. 
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45. The method of claim 44 
said password comprises 



wherein said step of securely sending 
the steps of sending said password to 
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47. 



48. 



# 



said server using triple Data 
SSL Internet protocol, thereby 
communication session betweer 
server system. 



Encryption Standard (DES) of the 
establishing an SSL triple DES 
said client system and said 



46. The method of claim 45 wherei i 



said step of said client system 



issuing a challenge comprises i le step of issuing a 64 bit random 
number to server system. 



The method of claim 46 whereip 
modifying said challenge comprises 
digitally signing said challenge 
a private key associated with 



The method of claim 47 
verifying said modified c 
public key corresponding to 
server system to verify said dt 



wherefin said step of said client system 
hallehge comprises the step of using a 
siid private key associated with said 
gital signature of said challenge. 



49. The method of claim 43 

monitoring said communication 



said server system reti 
said client system; 
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said step of said server 
the step of server system 
using a cryptographic device and 
server system. 



said 



wherein said step of continuously 

link comprises the steps of: 



ieving a password associated with 
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generating a message authentication code using said 
password associated wffth said client system; 



sending said message 
to said client system; 



authentication code and a challenge 



said client system vei 
said challenge and said 
client system. 



ying said authentication code using 
password associated with said 



50. The method of claim 49 wherein said step of retrieving a 
password further comprises 

retrieving said passwc *d from a database; 
decrypting said passw 3rd if it is encrypted. 

51. The method of claim 50 wherein said message authentication 
code is generated using a password associated with said client 
system. 

■vl I 

The method of claim 42 wherein said continuous and secure 
communication between client system and server system is 
established through a fire/ wall. 
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53. The method of claim 42 wherein said continuous and secure 
communication between client system and server system is 
established via the Internet secure sockets layer (SSL) protocol. 



^y 



54. The method of claim 42 wherein the step of said server system 
processing said user request takes place in a public network and a 
private network included within/said server system. 

55. The method of claim 54 wherein said public network processes 

1 0 user requests independently from said private network to protect 

the integrity of said server system. 

56. The method of claim 42 wherein communication between client 
system and server system is encrypted. 



The method of claim 56 wherein/ communication between client 
system and server system is encwpted by a United States Postal 
Service compliant cryptography: device. 



20 58. The method of claim 42 furtner comprising the step of disabling 

said client system from generating said indicia if said secure and 
continuos communication/between client system and server 
system is discontinued. 
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60. 
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The method of claim 54 wherem private network processes user 
requests for making payments. 

The method of claim 59 wherein the step of private network 
processing user request for making payments further comprises 
the step of communicating with a financial management system 
for verification of availability/ of funds and fund transfer. 
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61. The method of claim 42 furtner comprising the step of said 
server system communicating with the United States Postal 
Service Central Meter Licensing System (USPS CMLS) for 
processing of user licensing information. 
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62. The method of claim 61 further comprising the step of 
registering a user. 



63. An on-line postage system for processing of user requests and 
generating postage indicia comprising: 



20 



a client system for [interfacing with a user, 



a server system iA continuous and secure communication 
with said client system, comprising: 
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a communication server for communicating with 
client system; 

a database server for storing user information; 



a transaction server for 
communicated to server s 
system; 



processing of requests 
ystem by said client 



a firewall for ensuring the integrity of said server 



system against potential 



unauthorized access; 



for 



a cryptographic device 
communication betweer 
system; 



encrypting 
client system and server 



a communication link with the United States Postal 
Service Central Meter licensing System (USPS 
CMLS) for licensing of a user; 



a communication link 



with a financial 



management system for processing user payments. 



64. The on-line postage system of claim 



63 comprising a system 



software down-loadable from a server system to a client system. 
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65. The on-line postage syste i\ of claim 63 wherein said system is 
accessible through an Internet portal. 

66. The on-line postage syste: n of claim 63 wherein said client 
system interfaces with on ? or more users. 

67. The on-line postage syste n of claim 63 wherein said client 
system comprises administration software to monitor one or 
more client systems. 
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